Search for packages
| purl | pkg:composer/typo3/cms-core@6.2.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-21338
Aliases: GHSA-4jhw-2p6j-5wmp |
URL Redirection to Untrusted Site (Open Redirect) Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-26227
Aliases: GHSA-vqqx-jw6p-q3rf |
Cross-site Scripting TYPO3 is an open source PHP based web content management system. In TYPO3 the system extension Fluid (typo3/cms-fluid) … |
Vulnerable Vulnerable |
|
CVE-2021-21339
Aliases: GHSA-qx3w-4864-94ch |
Cleartext Storage of Sensitive Information User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8091
|
Cross-site Scripting `svg.swf` in TYPO3 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a … |
Vulnerable |
|
GHSA-4jhw-2p6j-5wmp
Aliases: CVE-2021-21338 |
Open Redirection in Login Handling ### Problem It has been discovered that Login Handling is susceptible to open redirection which … | There are no reported fixed by versions. |
|
GHSA-qx3w-4864-94ch
Aliases: CVE-2021-21339 |
Cleartext storage of session identifier ### Problem User session identifiers were stored in cleartext - without processing of additional cryptographic … | There are no reported fixed by versions. |